Uploaded image for project: 'Sentry'
  1. Sentry
  2. SENTRY-1122

Allow Solr Audit Log to Read Impersonator Info

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 1.6.0
    • Fix Version/s: 1.7.0
    • Component/s: Solr Plugin
    • Labels:
      None

      Description

      Currently, the impersonator info written by Sentry is always null:

       
      String impersonator = null; // FIXME
      

      (https://github.com/apache/incubator-sentry/blob/b095b5b991a164983163390f0c8c6f78557d017e/sentry-solr/solr-sentry-core/src/main/java/org/apache/solr/sentry/SentryIndexAuthorizationSingleton.java#L129)

      Like with the user name, we should read out an http request attribute to fill in this info. It is up to the underlying Solr authentication filter to fill this info in; that's outside of the scope of Sentry, but this at least allows that to be done.

        Attachments

        1. SENTRY-1122.patch
          4 kB
          Gregory Chanan
        2. SENTRY-1122.patch
          2 kB
          Gregory Chanan

          Issue Links

            Activity

              People

              • Assignee:
                gchanan Gregory Chanan
                Reporter:
                gchanan Gregory Chanan
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: